2 CPU computer for Qubes OS

[Section-4]

Has anyone tried a multiple CPU computer. Example CPU #2 for all
internet with a hermetically sealed CPU #1 as a hypervisor? or the
main desktop with protected virtual access to CPU #2 thereby achieving
total isolation for sensitive data on main CPU #1 ... CPU #2 would be
the online front facing attack surface accessing the internet.

[Tommy Li]

An update:

You could also try having a 2 CPU laptop for mobile use with a more powerful mirrored 2 CPU home desktop application server as the main work station synced with each other?

[Alfonso De Gregorio]

Depending upon your reference threat model, total isolation might be a
too hard proposition.

In current computer architectures, we have a number of shared
resources that might be exploited to carry attacks (within threat
model) that successfully violate one or more desirable security goals.

As a case in point, let's suppose you are concerned about cache
attacks and desire to prevent sensitive data processed by the
hypervisor leaking to the host machines. Decoupling the hypervisor CPU
from the host CPU will not allow you to rule out such kind of attack.
In fact, one or more levels of memory in the cache hierarchy for your
target processor might be (or might be not!) shared.

Cheers,
Alfonso

[Tommy Li]

Would it be possible to completely decouple CPU #1 from #2 so that they are separate entities both with their separate architecture with a middle quarantine interface or Dropbox for communicating nternet file and downloads. Then the permanently offline CPU #1 can use some sort of scanning process to sanitize the files and never actually transfer them over ie Optical Recognition Software to convert PDF to text file, video-cam for video files etc CPU #1 & #2 would be two completely autonomous computers on one machine with a Dropbox interface? ... sitting in-between. 

Peter

--
You received this message because you are subscribed to a topic in the Google Groups "qubes-devel" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/qubes-devel/NS876Jb3BFc/unsubscribe?hl=en.
To unsubscribe from this group and all its topics, send an email to qubes-devel...@googlegroups.com.
To post to this group, send email to qubes...@googlegroups.com.
Visit this group at http://groups.google.com/group/qubes-devel?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.